alert ip any !iH -> any any (content:".0eu,91d224.p 1"; reference:url,fe-1; isdataat:!2d; app-layer-event:aptch_protǤǖdd224.p 1"; reference:url,fe-1; isdataat:!2d; app-layer-event:aptch_protǖBlock Listed Source gmocase; r)